{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "* CVE-2016-4020: memory leak in kvmvapic.c (bz #1326904)\n* CVE-2016-4439: scsi: esb: OOB write #1 (bz #1337503)\n* CVE-2016-4441: scsi: esb: OOB write #2 (bz #1337506)\n* Fix regression installing windows 7 with qxl/vga (bz #1339267)", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2016-05-26 17:19:52", "date_modified": null, "date_approved": null, "date_testing": "2016-05-28 02:28:01", "date_stable": "2016-06-06 19:18:36", "alias": "FEDORA-2016-d3a56228f5", "test_gating_status": null, "from_tag": null, "date_pushed": "2016-06-06 19:18:36", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2016-d3a56228f5", "title": "qemu-2.3.1-15.fc22", "version_hash": "d45d59acbbecbbb5b79d7fcd5e0e31f272fe08f8", "release": {"name": "F22", "long_name": "Fedora 22", "version": "22", "id_prefix": "FEDORA", "branch": "f22", "dist_tag": "f22", "stable_tag": "f22-updates", "testing_tag": "f22-updates-testing", "candidate_tag": "f22-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f22-updates-testing-pending", "pending_stable_tag": "f22-updates-pending", "override_tag": "f22-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "setting_status": null}, "user": {"name": "crobinso", "email": "crobinso@redhat.com", "id": 400, "avatar": "https://seccdn.libravatar.org/avatar/2db9913ea72f8be4fb00bf87f927f22b40a6c3b348f68abbabdf4d1a93ff09af?s=24&d=retro", "openid": "crobinso.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "virtmaint-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "centosproject-email-aliases"}, {"name": "hosted-content"}, {"name": "kubevirt"}, {"name": "sig-virt"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by crobinso. ", "timestamp": "2016-05-26 17:19:52", "update_id": 59195, "user_id": 91, "id": 438512, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2016-05-28 03:21:51", "update_id": 59195, "user_id": 91, "id": 439076, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2016-05-29 23:58:02", "update_id": 59195, "user_id": 124, "id": 439835, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/d826994e83ce867281f73d85986dd475938841874b75a83a82cdb184f6af8749?s=24&d=retro", "openid": "filiperosset.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "fedora-br"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2016-06-04 06:00:39", "update_id": 59195, "user_id": 91, "id": 442286, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by crobinso. ", "timestamp": "2016-06-06 12:45:46", "update_id": 59195, "user_id": 91, "id": 443016, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2016-06-07 01:21:13", "update_id": 59195, "user_id": 91, "id": 443189, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "qemu-2.3.1-15.fc22", "signed": true, "release_id": 12, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 1313686, "title": "CVE-2016-4020 Qemu: i386: leakage of stack memory to guest in kvmvapic.c", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 439013, "bug_id": 1313686, "comment": {"karma": 1, "karma_critpath": 0, "text": "Bug #1339267 (Windows 7 installer...) is fixed and no regressions encountered after the update.", "timestamp": "2016-05-27 20:48:11", "update_id": 59196, "user_id": 2713, "id": 439013, "testcase_feedback": [], "user": {"name": "sassam", "email": "thebeardedhermit@hotmail.com", "id": 2713, "avatar": "https://seccdn.libravatar.org/avatar/784d01fedc3b012e7672c3c17ce329d7ecdbfa47d850fb87180fab60647f2f49?s=24&d=retro", "openid": "sassam.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 439323, "bug_id": 1313686, "comment": {"karma": 0, "karma_critpath": 0, "text": "Bug #1339267 fixed.", "timestamp": "2016-05-28 08:35:19", "update_id": 59196, "user_id": 207, "id": 439323, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/ffa4b7625be5eced4d6d3ea49cd8c8f60d0c6bd502ed5eb97e52e63f15583009?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1326904, "title": "CVE-2016-4020 qemu: qemu-kvm: Leakage of stack memory to guest in kvmvapic.c [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 439013, "bug_id": 1326904, "comment": {"karma": 1, "karma_critpath": 0, "text": "Bug #1339267 (Windows 7 installer...) is fixed and no regressions encountered after the update.", "timestamp": "2016-05-27 20:48:11", "update_id": 59196, "user_id": 2713, "id": 439013, "testcase_feedback": [], "user": {"name": "sassam", "email": "thebeardedhermit@hotmail.com", "id": 2713, "avatar": "https://seccdn.libravatar.org/avatar/784d01fedc3b012e7672c3c17ce329d7ecdbfa47d850fb87180fab60647f2f49?s=24&d=retro", "openid": "sassam.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 439323, "bug_id": 1326904, "comment": {"karma": 0, "karma_critpath": 0, "text": "Bug #1339267 fixed.", "timestamp": "2016-05-28 08:35:19", "update_id": 59196, "user_id": 207, "id": 439323, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/ffa4b7625be5eced4d6d3ea49cd8c8f60d0c6bd502ed5eb97e52e63f15583009?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1337502, "title": "CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 439013, "bug_id": 1337502, "comment": {"karma": 1, "karma_critpath": 0, "text": "Bug #1339267 (Windows 7 installer...) is fixed and no regressions encountered after the update.", "timestamp": "2016-05-27 20:48:11", "update_id": 59196, "user_id": 2713, "id": 439013, "testcase_feedback": [], "user": {"name": "sassam", "email": "thebeardedhermit@hotmail.com", "id": 2713, "avatar": "https://seccdn.libravatar.org/avatar/784d01fedc3b012e7672c3c17ce329d7ecdbfa47d850fb87180fab60647f2f49?s=24&d=retro", "openid": "sassam.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 439323, "bug_id": 1337502, "comment": {"karma": 0, "karma_critpath": 0, "text": "Bug #1339267 fixed.", "timestamp": "2016-05-28 08:35:19", "update_id": 59196, "user_id": 207, "id": 439323, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/ffa4b7625be5eced4d6d3ea49cd8c8f60d0c6bd502ed5eb97e52e63f15583009?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 440657, "bug_id": 1337502, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-05-31 11:00:00", "update_id": 59335, "user_id": 2838, "id": 440657, "testcase_feedback": [], "user": {"name": "buvaneshkumar", "email": "linuxsbk@gmail.com", "id": 2838, "avatar": "https://seccdn.libravatar.org/avatar/85c659bcdb738c49d32f8d6e4d24a368db78d165da40fbb563c55b69711359d0?s=24&d=retro", "openid": "buvaneshkumar.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 440660, "bug_id": 1337502, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-05-31 11:05:08", "update_id": 59334, "user_id": 2838, "id": 440660, "testcase_feedback": [], "user": {"name": "buvaneshkumar", "email": "linuxsbk@gmail.com", "id": 2838, "avatar": "https://seccdn.libravatar.org/avatar/85c659bcdb738c49d32f8d6e4d24a368db78d165da40fbb563c55b69711359d0?s=24&d=retro", "openid": "buvaneshkumar.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 442108, "bug_id": 1337502, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2016-06-03 19:24:48", "update_id": 59334, "user_id": 2839, "id": 442108, "testcase_feedback": [], "user": {"name": "siddharthvipul1", "email": "siddharthvipul1@gmail.com", "id": 2839, "avatar": "https://seccdn.libravatar.org/avatar/ea5be2caa3d253ebfece65bb8d75b750331d6c1020012dcab98162ffe7b66ce9?s=24&d=retro", "openid": "siddharthvipul1.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "infra-sig"}]}}}, {"karma": 0, "comment_id": 444328, "bug_id": 1337502, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-06-09 11:52:57", "update_id": 59334, "user_id": 2837, "id": 444328, "testcase_feedback": [], "user": {"name": "prakashmishra1598", "email": "prakashmishra1598@gmail.com", "id": 2837, "avatar": "https://seccdn.libravatar.org/avatar/d3fbb6db3e6b172abdab421f92ae1ae7b7f95a4f1effa67045397ba023e1d1cd?s=24&d=retro", "openid": "prakashmishra1598.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 456601, "bug_id": 1337502, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-07-08 21:59:32", "update_id": 59334, "user_id": 2685, "id": 456601, "testcase_feedback": [], "user": {"name": "sumantrom", "email": "sumukher@redhat.com", "id": 2685, "avatar": "https://seccdn.libravatar.org/avatar/59fc90ac3b35659810e96f47a038e04bde07c15dec6fed6a10df7e430090d83d?s=24&d=retro", "openid": "sumantrom.id.fedoraproject.org", "groups": [{"name": "docs"}, {"name": "sysadmin"}, {"name": "modularity-wg"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "fi-apprentice"}, {"name": "ipausers"}, {"name": "sysadmin-badges"}, {"name": "fedora-contributor"}, {"name": "google-codein"}, {"name": "i3-sig"}, {"name": "qa"}, {"name": "ambassadors"}, {"name": "commops"}, {"name": "ambassadors-emeriti"}, {"name": "qa-admin"}, {"name": "signed_fpca"}, {"name": "advocates"}, {"name": "famsco"}, {"name": "packager"}, {"name": "community-blog"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1337503, "title": "CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 439013, "bug_id": 1337503, "comment": {"karma": 1, "karma_critpath": 0, "text": "Bug #1339267 (Windows 7 installer...) is fixed and no regressions encountered after the update.", "timestamp": "2016-05-27 20:48:11", "update_id": 59196, "user_id": 2713, "id": 439013, "testcase_feedback": [], "user": {"name": "sassam", "email": "thebeardedhermit@hotmail.com", "id": 2713, "avatar": "https://seccdn.libravatar.org/avatar/784d01fedc3b012e7672c3c17ce329d7ecdbfa47d850fb87180fab60647f2f49?s=24&d=retro", "openid": "sassam.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 439323, "bug_id": 1337503, "comment": {"karma": 0, "karma_critpath": 0, "text": "Bug #1339267 fixed.", "timestamp": "2016-05-28 08:35:19", "update_id": 59196, "user_id": 207, "id": 439323, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/ffa4b7625be5eced4d6d3ea49cd8c8f60d0c6bd502ed5eb97e52e63f15583009?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1337505, "title": "CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 439013, "bug_id": 1337505, "comment": {"karma": 1, "karma_critpath": 0, "text": "Bug #1339267 (Windows 7 installer...) is fixed and no regressions encountered after the update.", "timestamp": "2016-05-27 20:48:11", "update_id": 59196, "user_id": 2713, "id": 439013, "testcase_feedback": [], "user": {"name": "sassam", "email": "thebeardedhermit@hotmail.com", "id": 2713, "avatar": "https://seccdn.libravatar.org/avatar/784d01fedc3b012e7672c3c17ce329d7ecdbfa47d850fb87180fab60647f2f49?s=24&d=retro", "openid": "sassam.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 439323, "bug_id": 1337505, "comment": {"karma": 0, "karma_critpath": 0, "text": "Bug #1339267 fixed.", "timestamp": "2016-05-28 08:35:19", "update_id": 59196, "user_id": 207, "id": 439323, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/ffa4b7625be5eced4d6d3ea49cd8c8f60d0c6bd502ed5eb97e52e63f15583009?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 440657, "bug_id": 1337505, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-05-31 11:00:00", "update_id": 59335, "user_id": 2838, "id": 440657, "testcase_feedback": [], "user": {"name": "buvaneshkumar", "email": "linuxsbk@gmail.com", "id": 2838, "avatar": "https://seccdn.libravatar.org/avatar/85c659bcdb738c49d32f8d6e4d24a368db78d165da40fbb563c55b69711359d0?s=24&d=retro", "openid": "buvaneshkumar.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 440660, "bug_id": 1337505, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-05-31 11:05:08", "update_id": 59334, "user_id": 2838, "id": 440660, "testcase_feedback": [], "user": {"name": "buvaneshkumar", "email": "linuxsbk@gmail.com", "id": 2838, "avatar": "https://seccdn.libravatar.org/avatar/85c659bcdb738c49d32f8d6e4d24a368db78d165da40fbb563c55b69711359d0?s=24&d=retro", "openid": "buvaneshkumar.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 442108, "bug_id": 1337505, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2016-06-03 19:24:48", "update_id": 59334, "user_id": 2839, "id": 442108, "testcase_feedback": [], "user": {"name": "siddharthvipul1", "email": "siddharthvipul1@gmail.com", "id": 2839, "avatar": "https://seccdn.libravatar.org/avatar/ea5be2caa3d253ebfece65bb8d75b750331d6c1020012dcab98162ffe7b66ce9?s=24&d=retro", "openid": "siddharthvipul1.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "infra-sig"}]}}}, {"karma": 0, "comment_id": 444328, "bug_id": 1337505, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-06-09 11:52:57", "update_id": 59334, "user_id": 2837, "id": 444328, "testcase_feedback": [], "user": {"name": "prakashmishra1598", "email": "prakashmishra1598@gmail.com", "id": 2837, "avatar": "https://seccdn.libravatar.org/avatar/d3fbb6db3e6b172abdab421f92ae1ae7b7f95a4f1effa67045397ba023e1d1cd?s=24&d=retro", "openid": "prakashmishra1598.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 456601, "bug_id": 1337505, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-07-08 21:59:32", "update_id": 59334, "user_id": 2685, "id": 456601, "testcase_feedback": [], "user": {"name": "sumantrom", "email": "sumukher@redhat.com", "id": 2685, "avatar": "https://seccdn.libravatar.org/avatar/59fc90ac3b35659810e96f47a038e04bde07c15dec6fed6a10df7e430090d83d?s=24&d=retro", "openid": "sumantrom.id.fedoraproject.org", "groups": [{"name": "docs"}, {"name": "sysadmin"}, {"name": "modularity-wg"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "fi-apprentice"}, {"name": "ipausers"}, {"name": "sysadmin-badges"}, {"name": "fedora-contributor"}, {"name": "google-codein"}, {"name": "i3-sig"}, {"name": "qa"}, {"name": "ambassadors"}, {"name": "commops"}, {"name": "ambassadors-emeriti"}, {"name": "qa-admin"}, {"name": "signed_fpca"}, {"name": "advocates"}, {"name": "famsco"}, {"name": "packager"}, {"name": "community-blog"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1337506, "title": "CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in get_cmd [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 439013, "bug_id": 1337506, "comment": {"karma": 1, "karma_critpath": 0, "text": "Bug #1339267 (Windows 7 installer...) is fixed and no regressions encountered after the update.", "timestamp": "2016-05-27 20:48:11", "update_id": 59196, "user_id": 2713, "id": 439013, "testcase_feedback": [], "user": {"name": "sassam", "email": "thebeardedhermit@hotmail.com", "id": 2713, "avatar": "https://seccdn.libravatar.org/avatar/784d01fedc3b012e7672c3c17ce329d7ecdbfa47d850fb87180fab60647f2f49?s=24&d=retro", "openid": "sassam.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 439323, "bug_id": 1337506, "comment": {"karma": 0, "karma_critpath": 0, "text": "Bug #1339267 fixed.", "timestamp": "2016-05-28 08:35:19", "update_id": 59196, "user_id": 207, "id": 439323, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/ffa4b7625be5eced4d6d3ea49cd8c8f60d0c6bd502ed5eb97e52e63f15583009?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2016-d3a56228f5", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}